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AMENDMENTS TO THE CLAIMS 

1. (Previously presented) A method for generating an encryption key for 
use with a host device having a host identification that is exclusive to said host device 
and stored therein, for encrypting a file, which comprises a plurality of blocks of 
plaintext data A in a manner that said encrypted file can only be decrypted by said host 
device, the method comprising: 

retrieving the host identification from the host device for use as a private portion 
of an encryption key exclusive to one and only one said host device; 

generating at least one content variable as a public portion of said encryption 
key, where said at least one content variable uniquely identifies a corresponding block 
of said file; 

combining the host identification and the at least one content variable to produce 
the encryption key; 

encrypting a block of plaintext data using the encryption key to produce a block 

of ciphertexl that can only be decrypted by said host device; 

appending only the at least one content variable to the block of ciphertext; and 
storing the block of ciphertext and the appended one or more content variable 

within a storage device. 

2. (Previously presented) The encryption key generation method of claim 
1 wherein said step of combining comprises: 

using a predetermined method, wherein combining the host identification and the 
at least one content variable repeatedly produces the same encryption key. 

3. (Previously presented) The encryption key generation method of claim 
1, wherein the host device includes a secure clock, the method further comprising: 

obtaining a time variable from the secure clock within the host device; 
combining the host identification, the at least one content variable and the time 
variable to produce the encryption key. 
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4. (Previously presented) A method for generating an encryption key to 
encrypt a block of plaintext for use with a host device having a secure clock and a host 
identification that is exclusive to said host device, assigned thereto and saved therein, 
the method comprising: 

retrieving the host identification from the host device for use as a private portion 
of an encryption key exclusive to one and only one host device; 

generating a content identification, wherein the content identification corresponds 
to the block of plaintext as a public portion of said encryption key; 

obtaining a time variable from the secure clock within the host device; 

combining the host identification, the content identification and the time variable 
to produce tne encryption key that is exclusive to one and only said host device. 

5. (Previously presented) A method for encrypting a block of plaintext for 
transmission over an unsecured interface to a storage device, for use with a host device 
having a host identification that is exclusive to said host device, assigned thereto and 
stored therein, the method comprising: 

retrieving the host identification from the host device for use as a private portion 
of an encryption key exclusive to one and only one host device; 

generating at least one content variable as a public portion of said encryption 
key, where ^aid at least one content variable uniquely identifies a corresponding block 
of said file; 

combining the host identification and the at least one content variable to produce 
an encryption key; 

encrypting the block of plaintext using the encryption key to produce a block of 
ciphertext that can only be decrypted by said host device; 

appending the at least one content variable to the block of ciphertext; 

transmitting the block of ciphertext and the appended at least one content 
variable over the unsecured interface to the storage device; and 

storing the block of ciphertext and the appended one or more content variables 
within the storage device. 
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6, (Previously presented) The method of encrypting the block of plaintext 
of claim 5, wherein the host device further comprises a secure clock, the method further 
comprising: 

obtaining a first time variable from the secure clock within the host device; 
combining the host identification, the at least one content variable and the first 
time variable to produce an encryption key. 

7, (Previously presented) The method of encrypting the block of plaintext 
of claim 6, for further use decrypting the block of ciphertext, the method comprising: 

retrieving the stored block of ciphertext and the appended at least one content 
variable from the storage device; 

retrieving the host identification from the host device; 

obtaining a second time variable from the secure clock within the host device; 

combining the host identification, the at least one content variable and the 
second time? variable to produce a second encryption key, wherein if the first time 
variable and the second time variable do not match, the second encryption key will not 
decrypt the block of ciphertext and if the first time variable matches the second time 
variable the second encryption key will decipher the block of ciphertext. 

8, (Previously presented) The method of encrypting the block of plaintext 
of claim 5 for further use decrypting the stored block of ciphertext, the method 
comprising: 

retrieving the stored block of ciphertext and the appended at least one content 
variable from the storage device; 

retrieving the host identification from the host device; 

combining the host identification and the at least one content variables to 
produce the encryption key that was used to encrypt the file; and 

decrypting the block of ciphertext with the encryption key to produce the block of 
plaintext. 
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9. (Previously presented) The encryption key generation method of 
claim 3 further comprising: 

retrieving the stored block of ciphertext and the appended at least one content 
variable from the storage device; 

retrieving the host identification from the host device; 

obtaining a second time variable from the secure clock within the host device; 
combining the host identification, the at least one content variable, and the second time 
variable to produce a second encryption key, wherein if the first time variable and the 
second time variable do not match, the second encryption key will not decrypt the block 
of ciphertext; and if the first time variable matches the second time variable, the second 
encryption key will decipher the block of ciphertext. 

10. (Previously presented) The encryption key generation method of claim 
1 further comprising: 

retrieving the stored block of ciphertext and the appended at least one content 
variable from the storage device; 

retrieving by the host device the host identification from the host device; 

combining the host identification and the at least one content variable to produce 
the encryption key that was used to encrypt the file; and 

decrypting the block of ciphertext with the encryption key to produce the block of 
plaintext data. 

1 1 . (Previously presented) The encryption key generation method of claim 
5 wherein said step of combining comprises: 

using a predetermined method, wherein combining the host identification and the 
at least on<3 content variable produces the same encryption key each time the 
encryption k^y generation process is executed. 
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